Commit Graph

32124 Commits

Author SHA1 Message Date
Luca BRUNO
35be87da9c coreos-cincinnati: build latest master (f63c842) 2020-07-01 11:57:25 +00:00
Kevin Fenzi
7c0bd78564 inventory: drop bvmhost-a64-osbs-01 for now until it's configured. 2020-06-30 18:36:57 -07:00
Kevin Fenzi
bcfa960181 noc: do not try and create a rabbitmq user here in the playbook
The user is created in the cluster role and if we try and do this here,
and don't even pass the username to it, it just fails.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-06-30 18:10:08 -07:00
Kevin Fenzi
90c28879f9 nagios_server: Adjust ns01/02 to try and work with nagios external
Also adjust gateway group as ibiblio-gw can't be it's own parent.
Also setup vpn hosts also on external as it needs the hostgroup.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-06-30 17:55:12 -07:00
Kevin Fenzi
2290817ace inventory: drop more autosign01 and bastion-comm01 rabbitmq: add monitoring plugin now.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-06-30 17:10:32 -07:00
Kevin Fenzi
93b8e0c893 nagios_server: actually define the address for iad2_gw
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-06-30 16:25:11 -07:00
Kevin Fenzi
9770bae604 nagios_server: use iad2-mgmt-http.cfg
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-06-30 16:13:26 -07:00
Kevin Fenzi
e7edf9ef55 nagios_server: missed a phx2-gw in mgmt hosts.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-06-30 16:09:39 -07:00
Kevin Fenzi
9d9d7f6c5c nagios_server: more adjustments, drop fas for now, fix gateway hosts harder
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-06-30 15:59:32 -07:00
Kevin Fenzi
632d4a0273 nagios_server: adjust a bunch more things for iad2.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-06-30 15:39:32 -07:00
Kevin Fenzi
5a7245bf26 iptables / nagios_client/server: clean up more phx2 ips for iad2
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-06-30 14:51:43 -07:00
Stephen Smoogen
79efdbc2ca move ppc to 10 gig network 2020-06-30 17:50:04 -04:00
Kevin Fenzi
88ab378bba nagios_server: drop phx2_internal stuff, fix mailman01 to use iad2
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-06-30 14:40:14 -07:00
Kevin Fenzi
76f84c4348 mm-frontend-checkin01: fix ip address, it was colliding with resultsdb01
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-06-30 14:37:28 -07:00
Kevin Fenzi
6908fbf86a nagios_server: replace phx2_internal with iad2_internal.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-06-30 14:33:11 -07:00
Kevin Fenzi
f8c4957c95 iptables: adjust for new noc01 ip, drop some iptables files no longer used.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-06-30 14:24:09 -07:00
Kevin Fenzi
b7a5fbcc7e nagios: need a newline here
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-06-30 14:18:36 -07:00
Kevin Fenzi
edae5629bd autosign01 is not reachable via ansible in normal operation
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-06-30 14:08:27 -07:00
Kevin Fenzi
1267685f1a koji_hub: readd the heavybuilder channel for chromium
This only works currently for aarch64. we have 2 buildhw's that have a
lot of resources for aarch64, except for disk, so they are great fast
heavy builders. All the other arches machines are pretty much all the
same, so this doesn't help on any of them.

We might someday expand this to more arches and packages when it makes
sense to.

In this case it takes a chromium build that takes ~24 hours
down to taking about an hour.

Note that we are currently keeping these in the default channel too so
they can do normal builds most of the time. That might make chromium
wait a bit, but still will end up being a LOT faster.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-06-30 12:15:01 -07:00
Kevin Fenzi
2e3d3fdc9a inventory: add buildhw-a64-19/20 - cavium thunder x2's
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-06-30 11:31:56 -07:00
Mattia Verga
d0358e8ffe review-stats: create a second entrypoint
Signed-off-by: Mattia Verga <mattia.verga@protonmail.com>
2020-06-30 11:55:33 +00:00
Kevin Fenzi
7bd440f416 backups: re-enable normal backups now again.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-06-29 17:48:42 -07:00
Kevin Fenzi
66851a6a21 logserver: set domain_can_mmap_files for collectd
The collectd graph.cgi needs to mmap rrd files to properly show the
graphs and such in the web view.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-06-29 17:10:46 -07:00
Kevin Fenzi
dea602b390 clean up some groups/hosts that no longer exist.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-06-29 17:06:05 -07:00
Kevin Fenzi
882d40f9d3 actually check in the nuancier ccd files
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-06-29 16:34:45 -07:00
Kevin Fenzi
0ec52f5297 openvpn / server: add nuancier and fedocal ccd files
Also, remove all the old phx2 ones that were left.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-06-29 16:32:56 -07:00
Kevin Fenzi
a2f8671697 Readd fedocal and nuancier.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-06-29 16:04:32 -07:00
Kevin Fenzi
e9bc696bf3 buildhw-a64-01: set gw
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-06-28 20:40:50 -07:00
Kevin Fenzi
7ae76c1e5a koji_hub: go up to 1 day for keeping old repos around
1 hour seems a bit low, and we should be able to afford the tb or so for
1 days worth of them.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-06-28 17:27:09 -07:00
Kevin Fenzi
4038e1ba74 proxy02/03/13: move to f32 and update install urls
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-06-27 15:49:17 -07:00
Kevin Fenzi
c18f74386b kojira: change expired/deleted repo expiry down to an hour
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-06-27 14:50:54 -07:00
Kevin Fenzi
d087aea236 koji hub: check in current/patched kojira and adjust newrepos
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-06-27 11:19:31 -07:00
Kevin Fenzi
5521021287 koji_hub: put in hotfixed kojira and config for it
The stock 1.21.1 kojira has a number of problems.
It only does deletes rarely as part of the main thread, so if you are
needing to delete a ton of old repos it will never get to them all.
Also, it checks for it's running newrepos at a place in the loop that
causes it to take a lot longer to notice when it's hit the max for
newrepos.

So, this is the 1.21.1 version, and we will check in the diff/hotfix
which is upstream head version + several patches.

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-06-27 11:16:21 -07:00
Kevin Fenzi
97878de974 bodhi-backend: there isn't a f33-flatpak tag yet.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-06-27 09:46:34 -07:00
Kevin Fenzi
dd7169e36b batcave: install the actual sync script instead of the cron job twice.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-06-27 09:45:13 -07:00
Stephen Smoogen
ef902cc3c6 openvpn variable is needed for proxy32 2020-06-27 11:09:31 -04:00
Pavel Raiskup
4752f4092a copr: correctly set timeout to 30 hours
complements 35ff299cbd
2020-06-27 11:46:39 +02:00
Kevin Fenzi
7b848fd051 inventory: correct new guest hosts/ips
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-06-26 17:27:57 -07:00
Kevin Fenzi
ac84ee5885 Add buildvm's on bvmhost-a64-09/10
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-06-26 17:17:03 -07:00
Kevin Fenzi
7729ccf9b0 inventory: add bvmhost-a64-09/10
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-06-26 17:04:27 -07:00
Stephen Smoogen
d0fcfadbbe because we need dns for clevis also 2020-06-26 18:53:14 -04:00
Stephen Smoogen
bb6b6444b3 put in a netmask for clevis 2020-06-26 18:42:29 -04:00
Kevin Fenzi
4e4e338b3e buildhw: clevis when clause: This may need to be quoted.
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-06-26 15:33:27 -07:00
Kevin Fenzi
386f833f05 buildhw: also run the clevis role on buildhw-x86
Signed-off-by: Kevin Fenzi <kevin@scrye.com>
2020-06-26 15:26:13 -07:00
Stephen Smoogen
f7a2b66c56 ok back off various changes to the templates 2020-06-26 18:15:21 -04:00
Stephen Smoogen
305bd6af2f fix the ipv4_gw issue 2020-06-26 18:12:31 -04:00
Stephen Smoogen
f73b4ce9ca some networks will have multiple gateways 2020-06-26 17:59:29 -04:00
Stephen Smoogen
2e31f43080 do not mix bash fi and jinja endif 2020-06-26 17:56:23 -04:00
Stephen Smoogen
414dabc9b9 Try to hack it so builders and other multi eth boxes can have interfaces off easily until a real replacement is done. 2020-06-26 17:53:56 -04:00
Stephen Smoogen
040102e73b add the rest of the buildhw to inventory so they can be ansibled 2020-06-26 17:07:06 -04:00